Curated security research, vulnerabilities, advisories and tools for practitioners.

vulnerability coverage

Curated vulnerability security coverage. (Page 9)

241.

Golden dMSA: What Is dMSA Authentication Bypass?

vulnerability | 2025-07-16 09:30 | semperis.com | Original ↗ | .md | #active-directory | #authentication-bypass | #privilege-escalation

242.

RCE in the Most Popular Survey Software You've Never Heard Of

vulnerability | 2025-07-16 00:00 | CVE-2025-34300 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research

243.

CVE-2025-4660: Forescout SecureConnector RCE

vulnerability | 2025-07-16 00:00 | CVE-2025-4660 | netspi.com | Original ↗ | .md | #rce | #red-team | #c2

244.

When the Heat Gets to Your Database: A Refreshing SQL Injection Discovery in Z-Push

vulnerability | 2025-07-10 12:00 | xbow.com | Original ↗ | .md | #vulnerability-research | #sql-injection | #web-security

245.

Buried in the Log. Exploiting a 20 years old NTFS Vulnerability

vulnerability | 2025-07-09 14:05 | CVE-2025-49689 | swarm.ptsecurity.com | Original ↗ | .md | #privilege-escalation | #windows | #ntfs

246.

How to Block BadSuccessor: The Good, Bad, and Ugly of dMSA Migration

vulnerability | 2025-07-10 19:59 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #powershell

247.

Finding XSS in Salesforce Aura Components: How XBOW Got Creative

vulnerability | 2025-07-07 12:00 | xbow.com | Original ↗ | .md | #ai-security | #vulnerability-research | #web-security

248.

Abusing Windows, .NET quirks, and Unicode Normalization to exploit DNN (DotNetNuke)

vulnerability | 2025-07-08 00:00 | CVE-2025-52488 | slcyber.io | Original ↗ | .md | #vulnerability-research

249.

Set Sail: Remote Code Execution in SailPoint IQService via Default Encryption Key

vulnerability | 2025-07-08 00:00 | netspi.com | Original ↗ | .md | #rce | #encryption | #default-credentials

250.

CVE-2025-5777: CitrixBleed 2 Write-Up… Maybe?

vulnerability | 2025-07-07 13:29 | CVE-2025-5777 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #citrix

251.

‘Feeling close to a critical vulnerability is incredibly addictive’ – YouTuber gregxsunday on the joys of Bug Bounty

vulnerability | 2025-07-04 05:51 | yeswehack.com | Original ↗ | .md | #bug-bounty | #authentication | #interview

252.

RCE via Pacotes MKP no Checkmk - Execução Remota de Comandos via Interface Web

vulnerability | 2025-07-03 17:28 | CVE-2024-22116 | yokai.hakaisecurity.io | Original ↗ | .md | #rce | #vulnerability-research | #research

253.

CVE-2025-49493: XML External Entity (XXE) Injection in Akamai CloudTest

vulnerability | 2025-06-30 12:00 | CVE-2025-49493 | xbow.com | Original ↗ | .md | #cloud | #cloud-security | #vulnerability-research

254.

OpenAI VDP for bugs found by AI, CVE funding fears persist, ‘shift left’ towards vulnerability overload – OffSec roundup for CISOs

vulnerability | 2025-06-30 08:21 | yeswehack.com | Original ↗ | .md | #ai-security | #vdp | #shift-left

255.

How we got persistent XSS on every AEM cloud site, thrice

vulnerability | 2025-07-01 00:00 | CVE-2025-47114 | slcyber.io | Original ↗ | .md | #cloud | #vulnerability-research | #xss

256.

Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN

vulnerability | 2025-06-24 12:00 | CVE-2025-0133 | xbow.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #xss

257.

nOAuth Abuse Alert: Full Account Takeover of Entra Cross-Tenant SaaS Applications

vulnerability | 2025-06-25 13:15 | semperis.com | Original ↗ | .md | #account-takeover | #entra-id | #vulnerability

258.

CVE-2025-34508: Another File Sharing Application, Another Path Traversal

vulnerability | 2025-06-17 13:25 | CVE-2025-34508 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #path-traversal

259.

‘AI slop’ bug reports and outsourcing triage, OpenPGP.js signature-spoofing bug, race to combat zero-day exploits – OffSec roundup for CISOs

vulnerability | 2025-06-16 09:19 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #zero-day

260.

Critical signature-spoofing vulnerability in OpenPGP.js hits the headlines

vulnerability | 2025-06-11 11:34 | CVE-2025-47934 | yeswehack.com | Original ↗ | .md | #bug-bounty | #cryptography | #vulnerability

261.

CVE-2025-26685 – Spoofing to Elevate Privileges with Microsoft Defender for Identity

vulnerability | 2025-06-12 00:00 | CVE-2025-26685 | netspi.com | Original ↗ | .md | #active-directory | #privilege-escalation | #ntlm

262.

Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]

vulnerability | 2025-06-10 18:22 | CVE-2025-49113 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

263.

BadSuccessor: How to Detect and Mitigate dMSA Privilege Escalation

vulnerability | 2025-06-05 13:34 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #detection

264.

Hacktron finds pre-auth RCE in Dassault Delmia Apriso

vulnerability | 2025-06-03 00:00 | hacktron.ai | Original ↗ | .md | #rce | #vulnerability-research | #pre-auth

265.

Nuclei Templates Monthly - May 2025

vulnerability | 2025-05-31 17:59 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #rce | #cve

266.

Cisco IOS XE WLC Arbitrary File Upload Vulnerability (CVE-2025-20188) Analysis

vulnerability | 2025-05-29 14:50 | CVE-2025-20188 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #cisco

267.

CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender

vulnerability | 2025-05-28 00:00 | netspi.com | Original ↗ | .md | #windows | #lpe | #vpn

268.

SCW + HackerOne: Leveling up developer security skills with HackerOne vulnerability data

vulnerability | 2025-05-23 16:54 | hackerone.com | Original ↗ | .md | #vulnerability-management | #secure-coding | #hackerone

269.

CVE-2025-32756: Low-Rise Jeans are Back and so are Buffer Overflows

vulnerability | 2025-05-22 16:35 | CVE-2025-32756 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #fortinet

270.

Authentication Bypass to RCE in Versa Concerto

vulnerability | 2025-05-21 19:36 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #rce

← Previous More →